$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: +Xhcw/KDupBRHKuzm1x+pPovdHwHKTitopmhIUy+Ly4= Subject key identifier: A5:85:29:3E:EF:7F:65:08:5D:86:3B:AE:AD:72:E7:24:E0:DD:54:15 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0EEF Signing time: Mon 30 Jun 2025 21:45:28 +0000 Manifest this update: Mon 30 Jun 2025 21:45:27 +0000 Manifest next update: Mon 07 Jul 2025 21:45:27 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: u2KO7G39fQ8b4anKV8r+AD0aRBM9rydNuQWTpQlsu7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Jun 30 21:45:27 2025 GMT Not After : Jul 7 21:45:27 2025 GMT Subject: CN=68630578-83c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:dc:44:61:d8:87:e0:36:83:dc:82:d6:0e: 11:75:42:0b:9b:5e:67:a4:b5:23:ef:84:a7:39:cc: d5:78:36:8a:66:e9:dc:5d:35:3c:52:10:a5:3a:5f: 9b:aa:f8:b3:17:73:41:15:9a:66:76:e9:73:2f:cf: d5:bd:9f:9c:bf:02:4f:64:a0:cf:49:a1:20:11:68: ca:d9:f0:4b:27:83:a1:0a:07:c3:ed:6f:bb:52:1d: 94:38:99:1f:0d:96:4f:d0:1b:a6:c9:fd:99:12:d6: d2:55:8a:e2:0d:7c:e0:d3:19:da:59:22:a4:1f:68: f2:0e:fa:cb:a5:76:54:ec:a9:0d:c5:08:90:21:a7: b5:65:bb:b5:f0:d5:39:a5:a2:4e:ac:2d:19:5e:8e: 7f:aa:78:ed:05:2e:a3:e3:5b:55:be:5e:82:c3:46: 21:ac:70:16:c5:b0:32:bb:b8:34:ee:d6:1b:0f:10: 44:04:bb:f9:cc:f7:a2:a8:7b:84:91:2c:5e:67:e6: 35:50:d9:14:5d:d9:b1:03:a8:d4:7f:8d:34:0f:c2: 40:1b:75:43:42:b7:22:c2:67:16:d5:0b:ef:fa:55: 65:b0:75:de:cc:c5:bb:c4:5f:d2:52:cd:6f:d0:f1: 82:6e:db:65:1f:ea:be:3c:1f:79:6b:3f:ca:94:8e: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:85:29:3E:EF:7F:65:08:5D:86:3B:AE:AD:72:E7:24:E0:DD:54:15 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ca:ac:e0:cc:94:c2:41:ff:ec:94:4c:59:24:df:5a:fb:3a: a4:1c:c0:c6:40:5b:a2:46:a3:6f:e6:71:0a:b9:02:a4:77:c9: a5:aa:33:54:f7:79:e3:4f:9c:23:ae:40:ae:23:d4:e7:df:c7: a7:e7:a9:04:10:3f:ab:bb:5c:58:97:e8:88:c8:1c:16:bd:e5: 00:9e:5c:9e:d3:03:ac:c4:3e:89:93:ed:f9:fe:c9:62:94:cb: 73:ec:64:17:ba:6c:93:1a:3d:e5:75:b2:03:4a:9d:86:3b:3a: 42:17:a9:eb:e3:f3:76:1a:f8:af:15:8f:b1:3f:6d:bc:a9:34: c2:05:6c:61:95:5b:91:a0:99:09:0a:ca:d7:ab:6d:c4:1e:5f: 65:4f:76:3a:33:69:6d:7e:b5:ef:4c:15:c0:3c:94:6c:0c:7e: 80:98:c9:46:10:c9:ae:8d:22:a7:ec:54:e6:c2:6f:a8:34:d6: 2f:c6:d9:4a:fd:bb:4d:f8:57:d2:1e:30:d6:20:a9:91:13:f6: 34:12:e1:36:5b:29:2e:e0:26:ff:51:82:6e:3b:8f:b3:69:25: 8c:e3:cb:c1:fa:d7:f3:ea:5b:76:29:5b:f9:f1:64:47:84:41: 8a:82:9f:0d:fa:d0:3a:d2:46:28:d0:4c:f1:ba:1f:8a:7f:e3: 54:cf:2e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUwNjMwMjE0NTI3WhcNMjUwNzA3MjE0NTI3WjAYMRYwFAYD VQQDEw02ODYzMDU3OC04M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2jcRGHYh+A2g9yC1g4RdUILm15npLUj74SnOczVeDaKZuncXTU8UhClOl+b qvizF3NBFZpmdulzL8/VvZ+cvwJPZKDPSaEgEWjK2fBLJ4OhCgfD7W+7Uh2UOJkf DZZP0Bumyf2ZEtbSVYriDXzg0xnaWSKkH2jyDvrLpXZU7KkNxQiQIae1Zbu18NU5 paJOrC0ZXo5/qnjtBS6j41tVvl6Cw0YhrHAWxbAyu7g07tYbDxBEBLv5zPeiqHuE kSxeZ+Y1UNkUXdmxA6jUf400D8JAG3VDQrciwmcW1Qvv+lVlsHXezMW7xF/SUs1v 0PGCbttlH+q+PB95az/KlI4AsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWFKT7v f2UIXYY7rq1y5yTg3VQVMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXyqzgzJTCQf/slExZJN9a+zqkHMDGQFuiRqNv5nEKuQKkd8mlqjNU 93njT5wjrkCuI9Tn38en56kEED+ru1xYl+iIyBwWveUAnlye0wOsxD6Jk+35/sli lMtz7GQXumyTGj3ldbIDSp2GOzpCF6nr4/N2GvivFY+xP228qTTCBWxhlVuRoJkJ CsrXq23EHl9lT3Y6M2ltfrXvTBXAPJRsDH6AmMlGEMmujSKn7FTmwm+oNNYvxtlK /btN+FfSHjDWIKmRE/Y0EuE2Wyku4Cb/UYJuO4+zaSWM48vB+tfz6lt2KVv58WRH hEGKgp8N+tA60kYo0Ezxuh+Kf+NUzy7I -----END CERTIFICATE-----Generated at Wed Jul 2 05:21:29 2025 by rpki-client